Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: 63NsKF9g+3PY+aL1nE68G1QIhPqyN2bv7DiNNQvc0zY=
Subject key identifier: F5:CC:44:95:37:9D:B9:F3:FB:7A:E0:F0:3A:3C:B1:33:3F:CB:E3:12
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 0199FD340F843E5A1718AA168E006CDF31C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 099F
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: IVNizmINzGKtS16vA6MUtf-GXl0.roa (hash: G8i6jSbmxzUZcDObDJ5m5iiPjmE+XboSGsF4lQOtdC8=)
2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: 9V0WK9DSfrPdHyIDk7C1O+Cjes3TIGMc3d1ABLO40as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0f:84:3e:5a:17:18:aa:16:8e:00:6c:df:31:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=f5cc4495379db9f3fb7ae0f03a3cb1333fcbe312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:b0:50:2c:4e:f6:34:69:25:6d:f5:ef:a6:
33:6d:a9:b3:a0:ab:f0:3e:93:88:04:c8:60:7b:de:
33:14:6a:40:61:e2:58:b6:3a:9f:dd:49:86:c7:5f:
77:1b:da:33:75:a5:c8:4a:4c:b6:b1:fb:6c:92:ae:
bf:8f:64:a3:69:6a:fc:98:dc:23:89:a6:58:f7:e6:
6d:33:00:f4:40:8f:de:9a:55:e2:57:ab:2b:91:1c:
c8:0b:04:e6:55:a4:01:92:14:15:5c:f6:f9:ca:67:
8d:77:ab:59:84:31:eb:fe:0d:2a:5c:e0:a9:c9:d1:
99:df:26:dd:57:72:51:bd:51:10:43:22:df:9d:ab:
97:64:27:89:3d:97:21:03:dd:33:ff:6f:11:6d:0c:
84:af:a7:3a:fd:93:f1:ed:c1:60:de:01:6e:62:3f:
a3:49:10:a4:f4:ff:7a:a0:3f:07:99:7d:1c:f0:38:
81:b3:70:0b:f7:ad:0f:fa:d4:b2:e2:1a:0b:db:c0:
9b:00:0d:cf:d5:2c:80:ed:ef:49:67:d6:bb:0e:c2:
93:2b:a2:9e:f7:35:ff:a4:aa:f6:26:fb:d1:69:a0:
8b:03:c6:73:26:9d:e2:2f:d1:fd:96:d1:36:57:40:
f0:3c:03:f8:42:4b:1b:bc:d7:6d:82:ed:9d:d3:02:
93:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CC:44:95:37:9D:B9:F3:FB:7A:E0:F0:3A:3C:B1:33:3F:CB:E3:12
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c1:7c:ee:df:8e:f3:78:98:81:2b:fe:3e:bf:67:52:db:f5:
6f:ba:c2:89:0b:c6:90:07:da:7f:09:ed:65:e2:e9:b9:f9:1b:
f4:29:61:a1:18:cd:10:93:8b:cd:38:84:92:ce:5e:70:02:11:
a7:08:34:fc:a5:1c:b5:da:e3:ad:0e:9d:f0:ec:25:de:57:8c:
7d:63:07:4e:4a:48:e9:0b:74:ee:99:f9:d0:ae:c3:5f:c5:87:
bc:dc:70:d0:85:3e:94:6c:e1:cd:86:7d:21:94:1d:60:23:3a:
15:03:77:f1:aa:18:fc:38:6d:7e:c7:72:2d:87:70:41:b2:45:
f3:d3:60:1b:1c:ad:cc:b5:0c:87:58:89:de:bc:c7:e8:9e:fe:
37:18:da:39:5d:2e:c4:73:1f:20:db:82:0a:c1:f9:c4:5d:92:
84:4a:fe:a7:83:ec:c0:8e:d9:e7:fa:9e:f2:44:80:20:11:53:
16:a5:1c:f8:5d:c5:4e:ce:48:64:b6:25:64:e7:41:37:c8:3c:
7c:06:f6:30:b3:63:e1:d2:a5:cb:10:9b:fb:6d:7d:a7:2c:4f:
11:18:d0:4b:68:1c:a9:84:53:88:06:12:0d:82:91:f4:31:e0:
d0:00:9e:92:84:ee:39:a5:e4:d6:1d:45:bc:a1:88:ec:93:d6:
24:bc:76:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:55 2025 by rpki-client